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DETAILED ACTION 



1. 



This office action is in response to the communication filed on 1 1/1 1/2008. 



2. 



Claims 1-25 and 27-53 are pending inn the application. 



3. 



Claims 1-25 and 27-53 are rejected. 



Response to Ar2uments 



4. The appUcant's arguments regarding the previous 35 USC 103 (a) type rejections are 
fiiUy considered, however, found not persuasive. Regarding the previous 35 USC 103(a) type 
rejections the applicant primarily argues that the cited references Stewart, or Bade 
independently or in combination fails to disclose the method wherein the determined location 
and the security protection for the network user node are updated continuously. However, the 
examiner respectfiiUy disagrees with the applicant. Upon fiirther examination, reference 
Stewart et al was found teach the method wherein the determined location and the security 
protection for the network user node are updated continuously (Col 5, starts at line 22, Col 7, 
lines 5-29; Col 8, line 26-43; access levels are determined/ updated based on the current 
geographical locations). Furthermore, reference Bade et al was found to teach the method 
wherein the determined location and the security protection for the network user node are 
updated continuously (Fig 3.316; Col 3, starts at line 55; Col 4, lines 30-54; djoiamically 
setting the security parameters based on the positional data). Although the examiner believes 
that the combination of the cited references teaches, or at least suggest enablement of the 
claimed invention, for the sake of the arguments/ response, the examiner incorporates a newly 
found reference Hastings et al that clearly teaches continuous update of the determined location 
and the security protection for the network user node (Col 4, line 35- Col 5, line 30; updating 
security policy, encryption parameters for each time period). 
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5. The applicant's arguments regarding 35 USC 103(a) type rejections of claims 17, 29 
and 49 further in view of Rusch are fully considered, however, moot in view of new grounds of 
rejections presented in this office action. 

Claim Rejections - 35 USC S 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the difterences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art 1o which said subject matter pertains. Patentability shall not be 
negatived by the maimer in which the invention was made. 

6. Claims 1-25 and 27-53 are rejected under 35 USC 103 (a) as being unpatentable over 
Stewart et al OJS 6970927 Bl) in view of Bade et al (US 6,778,837 B2) fiirther in view of 
Hastings et al (US 6370629 Bl) 

Regarding claim I, Stewart et al teaches a method of adjusting security for a network 
user node in a communication with network based upon the location of the node, comprising: 

determining the location of a network user node ( Col 8, lines 26-42; Col 20, lines 1-10; 
determinmg geographic location of the portable computing device) ; 

selecting a single level of security from a group of more than two security levels based 
on the determined location (Fig 5; access levels associated with the plurality of destination 
location information; Col 8, lines 26-42; provide services to the user based on geographic 
location information; Col 19, lines 60-67; Col 20, lines 1-10; access level is determined based 
on geographic location), the group of more than two security levels being stored in the memory 
( Col 6, lines 10-30; supporting multiple access levels; Col 20, lines 25-59; storing first, 
second access levels); and 



Application/Control Number: 1 0/053,01 3 Page 4 

Art Unit: 2436 

modifying the security protection for the network user node based upon the selected 
level of security (Col 20, lines 25-59; modifying/ switching to first or second access levels 
depending on location; wherein the access level is stored in a memory; Col 7, lines 5-25; Col 
10, lines 24-40; Col 20, lines 1-35; access level is based on geographic location; providing 
network access to the portable computing device based on the access level); 

wherein the group of more than two security levels is defined (Col 3, lines 15-28; Col 
8, lines 44-50; Col 10, line 65 to Col 11, lines 3; the access information may be provided by 
the PCD of the user; access level is based on geographic location); 

wherein the determined location and the security protection for the network user node 
are updated continuously (Col 5, starts at line 22, Col 7, lines 5-29; Col 8, line 26-43; access 
levels are determined/ updated based on the current geographical locations). 

Stewart et al fails to teach expressly security levels being stored in the network user 
node; and wherein the group/ security level is defined by a user of the network user node. 

However, Bade et al teaches security levels being stored in the network user node (Fig 
2; Col 3, lines 35- Col 4, line 28; storing predefined access parameter set by the user); and 
wherein the group/ security level is defined by a user of the network user node (Col 3, lines 
35- Col 4, line 28; Col 6, lines 20-45; user setting access parameters). Bade et al further 
teaches wherein the determined location and the security protection for the network user node 
are updated continuously (Fig 3.316; Col 3, starts at line 55; Col 4, lines 30-54; dynamically 
setting the security parameters based on the positional data). 

Alternatively, Hastings et al teaches wherein the determined location and the security 
protection for the network user node are updated continuously (Col 4, line 35- Col 5, line 60; 
updating security policy, encryption parameters for each time period). 
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Hastings et al , Bade et al and Stewart et al are analogous art because they are from 
the same field of endeavor of using geographic/ physical location information for providing 
access security/ authentication in a wireless network system. At the time of invention, it would 
have been obvious to a person of ordinary skill in the art to combine the teaching of Hastings et 
al with the modified Bade et al - Stewart et al method to fiirther include security levels being 
stored in the memory of the network user node, and wherein the group of more than two 
security levels is defined by a user of the network user node in order to provide users with the 
control of the security system djmamically. 

Regarding claim 18, it is rejected applying as same motivation and rationale applied 
above rejecting claim 1, furthermore, Stewart et al teaches a computer system for modifying 
security settings for a network user node based on the location of the node comprising: 

an input device having a communicative coupling with a system for determining the 
location of a network user node (Col 8, lines 26-40; PCD may include a GPS equipment to 
enable the PCD to provide its geographic location); 

a storage device (Col 14, lines 39-55; Col 5, lines 35-55; PCD memory) for storing a 
table of security modification to be performed based on a plurality of locations for the network 
user node, the security modification including more than two levels (Col 20, lines 25-59; 
modifying/ switching to first or second access levels depending on location; wherein the 
access level is stored in a memory comprised in a portable computing device); 

a processor coupled to a storage device for processing information,(Col 5, lines 50-67; 
PCD with wireless Ethernet card; Col 21, lines 60-67; Col 22, lines 1-10; determine the access 
level for the portable computing device by accessing the memory medium); and 
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a communication device capable of transmitting a data signal to the network user node 
(Col 7, lines 5-25; Col 8, lines 26-40); 

wherein the determined location and the security protection for the network user node 
are updated continuously (Col 5, starts at line 22, Col 7, lines 5-29; Col 8, line 26-43; access 
levels are determined/ updated based on the current geographical locations). 

Stewart et al fails to teach the security modification is defined by a user of the network 
user node; storing on a storage device, and generating a security modification instruction; and 
the network user node containing instructions to modify the security protection for the node. 

However, Bade et al teaches the security modification is defined by a user of the 
network user node. (Col 3, lines 35- Col 4, line 28; Col 6, lines 20-45; user setting access 
parameters ); storing on a storage device, and generating a security modification instruction 
(Fig 2; Col 3, lines 35- 60; Col 4, line 1-67; storing in authentication module/ software for 
setting predefined access parameter by the user); and the network user node containing 
instructions to modify the security protection for the node (Col 3, lines 35- 60; Col 4, line 1- 
67; authentication module/ software; automatically, dynamically changing access parameter). 
Bade et al further teaches wherein the determined location and the security protection for the 
network user node are updated continuously (Fig 3.316; Col 3, starts at line 55; Col 4, lines 30- 
54; dynamically setting the security parameters based on the positional data). 

Alternatively. Hastings et al teaches wherein the determined location and the security 
protection for the network user node are updated continuously (Col 4, line 35- Col 5, line 60; 
updating security policy, encryption parameters for each time period). 



Application/Control Number: 1 0/053,01 3 Page 7 

Art Unit: 2436 

Regarding claims 30 and 38, they recite the limitations of claims 1 and 18, therefore, 
they are rejected applying as same motivation and rationale above applied rejecting claims 1 
and 18. 

Regarding claim 2, it is rejected applying as same motivation and rationale applied 

above rejecting claim 1, furthermore, Stewart et al teaches network user node is a mobile 
device having a display (Col 5, lines 59-67; Col 6, lines 1-10; portable computing device/ 
PCD, PDA). 

Regarding claim 3, it is rejected applying as above rejecting claiml, furthermore, 
Stewart et al teaches the network user node's location is determined using a location sensing 
system (Col 8, lines 26-40; PCD may include a GPS equipment to enable the PCD to provide 
its geographic location). 

Regarding claim 4, it is rejected applying as above rejecting claim 3, furthermore, 
Stewart et al teaches the location sensing system is a global positioning satellite (GPS) system 
(Col 8, lines 26-40; PCD may include a GPS equipment to enable the PCD to provide its 
geographic location). 

Regarding claim 5, it is rejected applying as above rejecting claim 3, furthermore, 
Stewart et al teaches location sensing system uses signal bouncing and triangulation to 

determine network user node location (Col 2, lines 8-16; wireless network comprising Access 
Points, AP; Col 8, lines 26-42; providing geographic locations information of PCD). 
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Regarding claim 6, it is rejected applying as above rejecting claim 3, furthermore, 
Stewart et al discloses location sensing system to determine network user node location (Col 
8, lines 26-40; PCD may include a GPS equipment to enable the PCD to provide its geographic 
location). Stewart et al fails to disclose the use of signal bouncing and triangulation for that 
purpose. 

However, Bade et al discloses the use of signal bouncing and triangulation to 
determine network user node location ( Col 3, starts at line 20; triangulation). 

Regarding claim 7, it is rejected applying as above rejecting claim 3, furthermore, 
Stewart et al teaches network user node is in direct communication with the location sensing 
system (Col 8, lines 26-42). 

Regarding claim 8, it is rejected applying as above rejecting claim 1, furthermore, 

Stewart et al teaches sending a data signal includes transmitting the data signal using a 
wireless local area network (WLAN) protocol ( Col 10, lines 1-25, 55-67;wireless LAN). 

Regarding claim 9, it is rejected applying as above rejecting claim 8, furthermore, 
Stewart et al teaches WLAN protocol includes the IEEE 802.1 1 protocol (Col 10, lines 1-25, 
55-67; IEEE 802.1 1; wireless LAN). 

Regarding claim 10, it is rejected applying as above rejecting claims 6 and 8, 
furthermore, Bade et al discloses WLAN protocol includes Bluetooth wireless network 
protocol ( Col 3, starts at line 35; cellular/ wireless transceiver). Although Bade et al does not 
expressly teach a bluetooth protocol, since at the time of invention, Bluetooth technology was 
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well known in the art, it would be logically obvious to a person of ordinary skill in the art to 
use Bluetooth as wireless/ cellular protocol to provide an alternative cellular protocol. 

Regarding claim 11, it is rejected applying as above rejecting claim 1, furthermore, 
Stewart et al teaches the selecting step is carried out by reference to a table of desired security 
modifications based upon the location of network user node ( Fig 5, element: table of 
identification information and associated access information; Col 7, lines 30-67; table 
comprising identification and access control information). 

Regarding claim 12, it is rejected applying as above rejecting claim 1 1 furthermore, 
Stewart et al teaches security levels are provided by the user of the network user node for a 
variety of locations (Col 19, lines 60-67; Col 20, lines 1-20; Col 21, lines 10-40; Col 23, lines 
45-50; plurality of access points; plurality of network portable devices). 

Regarding claim 13, it is rejected applying as above rejecting claim 1 1 fiirthermore, 
Stewart et al teaches the security level is based on the type of location determined for the 

network user node (Fig 5, element : identification information comprising plurality of access 
levels associated with the pliirality of destination location information; Col 8, lines 26-42; 
provide services to the user based on geographic location information; Col 19, lines 60-67; Col 
20, lines 1-10; access level is determined based on geographic location). 

Regarding claim 14, it is rejected applying as above rejecting claims 1 and 6, 
fiirthermore, Stewart et al discloses the step of modifying the security protection for the 
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network user node includes restricting access to information unless a password is properly 
entered (Col 2, starting at line 20; Col 7, lines 5-25; access control). 

Furthermore, Bade et al discloses restricting access to information unless a password is 
properly entered (Col 4, starting at line 47). 

Regarding claim 15, it is rejected applying as above rejecting claim 1, furthermore, 
Stewart et al teaches the step of modifying the security protection for the network user node 
includes a complete denial of access to information using the network user node (Fig 4, 
element 226: disallowing access; Col 20, lines 5-35; if the access level is the second access 
level, the data is not provided). 

Regarding claim 16, it is rejected applying as above rejecting claim 1, furthermore, 
Stewart et al teaches denial to a subset of the information accessible using the node (Col 7, 
lines 5-30; Col 20, lines 5-35; providing appropriate level of access; providing access to one or 
more resources depending on permission level). 

Regarding claim 17, it is rejected applying as above rejecting claims 1, furthermore, 
Stewart et al discloses modifying the security protection for the network user node on data 
transmitted by the network user node (Col 20, lines 25-59; modifying access levels depending 
on location). Modified Bade et al - Stewart et al method fails to disclose modifying data 
encrj^tion parameters to change the strength of encryption on data. 

However, Hastings et al discloses modifying data encryption parameters to change 
strength of encryption on data (Col 3, lines 35-65; Col 4, starts at line 42; change of encryption 
level, and parameter or key depending of the geographic regions). 
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Regarding claims 19 -25, 27-28, 37, 42 and 45, they recite the limitations of claims 1- 
9, 10-14, 18, 30 and 38, therefore, they are rejected applying as above rejecting claims 1-9, 10- 
14, 18, 30 and 38. 

Regarding claims 29, 31-36, 39-41, 43-44, and 46-49, they recite the limitations of 
claims 1 -9, 1 1-13, 17-18 and 38, therefore, they are rejected applying as above rejecting 
claims 1-9, 11-13, 17-18 and 38. 

Regarding claims 50-53, they recite the limitations of claim 1,18,30, 38, therefore, 
they are rejected applying as above rejecting claim 1,18,30 and 38, furthermore, Stewart et al 
teaches network user node is a portable handheld device (Col 5, lines 59-67; Col 6, lines 1-10; 
portable computing device/ PCD, PDA). 

Conclusion 

7. Examiner's note: Examiner has cited parlicular columns and line mmibers in tlie references as applied to 
the claims above for the convenience of the applicant. Although the specified citations are representative of the 
teachings in tiie art and are appUed to the specific limitations within the individual claim, other passages and 
figures may be applied as well. It is respectflilly requested from the applicant, in preparing the responses, to fully 
consider the references in entirety as potentially teaching all or part of the claimed invention as well as the context 
of the passage as taught by the prior art or disclosed by the Examiner. 

8. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
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MONTHS of the mailing date of this final action and the advisory action is not mailed until 

after the end of the THREE-MONTH shortened statutory period, then the shortened statutory 
period will expire on the date the advisory action is mailed, and any extension fee pursuant to 
37 CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of 
this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shanto M Z Abedin whose telephone number is 571-272-3551. 
The examiner can normally be reached on M-F from 9:00 AM to 5:30 PM. If attempts to reach 
the examiner by telephone are unsuccessfiil, the examiner's supervisor, Moazzami Nasser, can 
be reached on 571-272-4195. 

The fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the 
Elecfronic Business Center (EBC) at 866-217-9197 (toll-free). 

Shanto M Z Abedin 
Examiner, AU 2436 
/Nasser G Moazzami/ 

Supervisory Patent Examiner, Art Unit 2436 
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